Page 80 of 5978 results (0.022 seconds)

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1

12 Jan 2024 — In libebml before 1.4.5, an integer overflow in MemIOCallback.cpp can occur when reading or writing. • https://github.com/Matroska-Org/libebml/blob/v1.x/NEWS.md • CWE-190: Integer Overflow or Wraparound

CVSS: 5.5EPSS: 0%CPEs: 8EXPL: 0

10 Jan 2024 — An integer overflow was addressed through improved input validation. • https://support.apple.com/en-us/HT213673 • CWE-190: Integer Overflow or Wraparound

CVSS: 8.1EPSS: 1%CPEs: 4EXPL: 0

10 Jan 2024 — Redis incorrectly handles resizing of memory buffers which can result in integer overflow that leads to heap overflow and potential remote code execution. • https://github.com/redis/redis/releases/tag/7.0.15 • CWE-190: Integer Overflow or Wraparound CWE-762: Mismatched Memory Management Routines •

CVSS: 7.8EPSS: 0%CPEs: 8EXPL: 0

09 Jan 2024 — The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21310 • CWE-197: Numeric Truncation Error •

CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0

09 Jan 2024 — Windows Kernel-Mode Driver Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios del controlador en modo kernel de Windows • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21309 • CWE-191: Integer Underflow (Wrap or Wraparound) •

CVSS: 7.8EPSS: 0%CPEs: 9EXPL: 1

09 Jan 2024 — Windows Kernel Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios del kernel de Windows • https://github.com/RomanRybachek/CVE-2024-20698 • CWE-190: Integer Overflow or Wraparound

CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 0

09 Jan 2024 — The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before writing to memory. • http://www.openwall.com/lists/oss-security/2024/06/04/2 • CWE-122: Heap-based Buffer Overflow •

CVSS: 9.0EPSS: 0%CPEs: 26EXPL: 0

09 Jan 2024 — Microsoft ODBC Driver Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código del controlador ODBC de Microsoft • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20654 • CWE-190: Integer Overflow or Wraparound

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0

09 Jan 2024 — EDK2 is susceptible to a vulnerability in the CreateHob() function, allowing a user to trigger a integer overflow to buffer overflow via a local network. ... An attacker, leveraging a local network, can initiate an integer overflow leading to a buffer overflow. • https://github.com/tianocore/edk2/security/advisories/GHSA-ch4w-v7m3-g8wx • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-680: Integer Overflow to Buffer Overflow •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0

09 Jan 2024 — Successful exploitation requires a local attacker to trigger an integer overflow in the calculation of the EventSize variable at DxeTpm2MeasureBootLib.c, leading to the heap-buffer overflow, presenting a moderate risk to confidentiality and integrity. • https://github.com/tianocore/edk2/security/advisories/GHSA-4hcq-p8q8-hj8j • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-122: Heap-based Buffer Overflow CWE-680: Integer Overflow to Buffer Overflow •